You can require multi-factor authentication by registered user class.
To enable the full set of administrator controls, click Allow Multi-Factor Authentication for all users in this organization.
To enforce multi-factor authentication by user class, select one or more of the user class options
System Administrators
Host Administrators
Regular Users
Click Save.
Note: It is best practice to notify users of any security policies that alter the sequence of steps or information needed at sign on before you apply these controls.